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A SHORTENED STATUTORY PERIOD FOR REPLY IS SET TO EXPIRE 3 MONTH(S) FROM 
THE MAILING DATE OF THIS COMMUNICATION. 

- Extensions of time may be available under the provisions of 37 CFR 1.136(a). In no event, however, may a reply be timely filed 
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earned patent term adjustment. See 37 CFR 1.704(b). 
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Replacement drawing sheet(s) including the correction is required if the drawing(s) is objected to. See 37 CFR 1.121(d). 
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DETAILED ACTION 

1 . This action is responsive to Applicant's amendment filed on June 30, 2005. 

2. Claims 8-17 are pending. 

3. Applicant amended claim 8. 

4. Claims 1-7 are canceled. 

5. The text of those sections of Title 35, U.S. Code not included in this action can 
be found in a prior Office action. 

Response to Amendment 

6. The 112/2"^ paragraph rejection to claim 8 is withdrawn as the amendment 
overcomes the rejection; however, in view of the amendment to claim 8, the claim is 
rejected under 112/1^* paragraph for lack of an enabling specification as indicated 
below. 

Response to Arguments 

7. The following is a response to the Remarks on pgs. 6-1 1 of the amendment 
(hereinafter Remarks). 

8- In reply to applicant's argument that lijima does not disclose "first means for 
writing or rewriting data in the nonvolatile memory ... when the first determining means 
determines that the command message does not include the validity data and the 
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second determining means determines the validity data is not stored in the nonvolatile 
memory" as recited in claim 8 (Remarks, pg. 7, 1^* full paragraph), it is noted that 
examiner's basis for interpreting the scope of this limitation is based on the invention 
described on pgs. 10-11 (fig. 10) of Applicant's specification. In the disclosure, the 
exemplary description of the invention identifies a command message having one of 4 
formats (figs. 7a. -7d.), wherein the format determines the type of the command 
message. If the message is format #1 , then the CPU receiving the command message 
writes or rewrites as designated by the command header area if the security flag is 
determined not yet to be validated. If the message is other than format #1 , the CPU 
writes or rewrites data designated by the security format information using the received 
command message. In this sense, "the validity data" of the command message as 
recited in the claim is analogous to the format of the command message. As outlined in 
the previous Office action and as indicated below, lijima fully discloses such a limitation: 
when an input message is received, a determination step determines if the input 
message is input command data for a particular action (such as DF definition command 
data) (col. 5:64-6:4). Furthermore, when such a determination is made of the command 
message, several checks are made to determine if validity data is stored in nonvolatile 
memory; the function of the validity data as an indicator of the validity of a security 
function includes, inter alia, a check for DF assignment (col. 5:64-6:51; 7:1-25 and 32- 
51 ; 9:5-28), verifying data in a user area (1 1 :28-12:29), and a verification step when the 
issuer of an IC card checks a memory of the card (col. 12:40-54). See also figure 10 
and related text. Hence, lijima anticipates the claimed invention recited in claim 8. 
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Claim Rejections - 35 USC §112 

9. The following is a quotation of the first paragraph of 35 U.S.C. 112: 

The specification shall contain a written description of the invention, and of the manner and process of 
making and using it, in such full, clear, concise, and exact terms as to enable any person skilled in the 
art to which it pertains, or with which it is most nearly connected, to make and use the same and shall 
set forth the best mode contemplated by the inventor of carrying out his invention. 

10. Claim 8 is rejected under 35 U.S.C. 112, first paragraph, as failing to comply with 
the enablement requirement. The claim(s) contains subject matter which was not 
described in the specification in such a way as to enable one skilled in the art to which it 
pertains, or with which it is most nearly connected, to make and/or use the invention. 
Claim 8 defines a device with a security function wherein validity data indicates whether 
the security function is valid, and a means to determine if a command message 
received includes said validity data, and means to determine if said validity data is 
stored. However, the specification does not describe the validity data as stored (or not 
stored) in the device as being one and the same as the validity data in the command 
message. In fact, based on the enabling disclosure of Applicant's specification (pgs. 

1 0-1 1 ), it is not clear exactly what is the claimed validity data of the command message 
that is being identified by the first determining means. Hence, the amended claim is not 
adequately enabled by the specification. 

Claim Rejections - 35 USC § 102 

11. Claims 8-11 and 13 are rejected under 35 U.S.C. 102(b) as being anticipated by 
lijima U.S. Patent No. 5,365,045 (hereinafter lijima). 
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12. As per claim 8, lijima discloses a portable electronic device with a security 
function, containing an application program, comprising: 

a. means for storing validity data indicating whether the security function is 
valid in a nonvolatile memory (col. 5:56-6:18 and 58-62; 11:28-12:19; 12:40-13:3; 
figure 1 0 and related text); 

b. first means for determining whether a command message received from 
outside of the device includes the validity data (6:5-18; 7:1-10 and 32-41; 9:6-18; 
9:63-10:6; 11:29-41; Figure 11 and related text); 

c. second means for determining whether the validity data is stored in the 
nonvolatile memory (figure 10 and related text); and 

d. first means for writing or rewriting data in the nonvolatile memory after 
receiving the command message when the first determining means determines 
that the command message does not include the validity data and the second 
determining means determines the validity data is not stored in the nonvolatile 
memory (5:64-6:50, especially 6:19-50; 12:31-13:3). 

The aforementioned cover the limitations of claim 8. 

13. As per claim 9, the rejection of claim 8 under 35 U.S.C. 102(b) is incorporated 
herein. In addition, the card further comprises a first means for outputting a status 
indicating that the command message is not acceptable when the first determining 
means determines that the command message is not included in the data for the 
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security function and the second determining means determines that the validity data is 
stored in the nonvolatile memory, lijima, col. 6:15-18. The aforementioned cover the 
limitations of claim 9. 

14. As per claim 10, the rejection of claim 8 under 35 U.S.C. 102(b) is incorporated 
herein. In addition, the card further comprises: 

a. a third means for determining whether verification of the data for the 
security function succeeded when the first determining means determines the 
command message is included in the data for the security function (col. 9:63- 
10:20); and 

b. second means for writing or rewriting data into the nonvolatile memory 
following the command message when the third determining means determines 
the verification was successful (10:30-1 1:27). 

The aforementioned cover the limitations of claim 10. 

15. As per claim 11, the rejection of claim 10 under 35 U.S.C. 102(b) is incorporated 
herein. In addition, the card further comprises a second means for outputting a status 
indicating that the command message is not acceptable when the third determining 
means determines the verification of the data for the security function was not 
successful, lijima, col. 1 1 :42-62. The aforementioned cover the limitations of claim 1 1 . 
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16. As per claim 13, the rejection of claim 9 under 35 U.S.C. 102(b) is incorporated 
herein. In addition, the command message further comprises: 

a. a writing or rewriting command (col. 10:42-45); and 

b. encoded data that is written or rewritten into the nonvolatile memory after 
being decoded based on verification of the data (4:9-17). 

The aforementioned cover the limitations of claim 13. 

Claim Rejections - 35 USC § 103 

1 7. The text of those sections of Title 35, U.S. Code not included in this action can 
be found in a prior Office action. 

18. Claims 12 and 14 are rejected under 35 U.S.C. 103(a) as being unpatentable 
over lijima in view of Schneier Applied Cryptography Chapter 2 "Protocol Building 
Blocks" and Chapter 24 "Example Implementations" (hereinafter Schneier). 

19. As per claims 12 and 14, the rejections of claims 9, 10 and 13 under U.S.C. 
102(b) are incorporated herein. Although, lijima does not explicitly disclose additional 
spare data on the command message guaranteeing the validity of the data, information 
transferred to an IC card is typically secured and validated by cryptographic methods as 
taught by Schneier. Schneier, pg. 587, Section 24.13 'Smart Cards'. Furthermore, 
Schneier teaches several general protocols to verify data using digital signatures and 
hashes. Schneier, pgs. 31-44; MAC, one-way hash, digital signature. It would be 
obvious to one of ordinary skill in the art at the time the invention was made to secure 
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the command data using digital signatures since doing so enables the receiver to 
validate the authorship of the received message. Schneier, pg. 35, 5 compelling 
reasons. The aforementioned cover the limitations of claims 12 and 14. 

20. Claims 15-17 are rejected under 35 U.S.C. 103(a) as being unpatentable over 
lijima in view of Grimonprez et al. U.S. Patent No. 5,473,690 (hereinafter Grimonprez). 

21. As per claim 15, the rejection of claim 9 under 35 U.S.C. 102(b) is incorporated 
herein. Although, lijima does not expressly disclose storing a plurality of application 
programs wherein each program has an associated security program, IC cards are 
typically designed to hold more then one application securely. For example, 
Grimonprez discloses a secure method for loading a plurality of applications on to a 
microprocessor of an IC card wherein each application has a corresponding security 
program. See Grimonprez, Figure 3, 'Name of Application' and Password of 
Application'; Figures 8 and 9. It would be obvious to one of ordinary skill in the art at the 
time the invention was made for the IC card to store a plurality of security programs, 
each corresponding to an application program. One would be motivated to do so to 
establish a more secure access methodology since a compromise of the password of 
an application does not compromise access to other applications stored in the smart 
card as known to one of ordinary skill in the art and as taught by Grimonprez, ibid. The 
aforementioned cover the limitations of claim 15. 



Application/Control Number: 09/498,995 Page 9 

Art Unit: 2132 

22. As per claim 16, the rejection of claim 13 under 35 U.S.C. 102(b) is incorporated 
herein. In addition, a plurality of security programs is separately validated in response 
to a prescribed command message for validation, and wherein each security program 
corresponds to an application program, lijima, col. 4:4-8; 11:28-12:19; Grimonprez, 
figures 3, 8, and 9, and related text. It would be obvious to one of ordinary skill in the 
art at the time the invention was made for a plurality of security programs to be 
separately validated in response to a prescribed command message for validation, and 
wherein each security program corresponds to an application program in the device 
taught by lijima to ensure the security of the user's data storage area by ensuring each 
of the plurality of applications associated with the user's data storage area. See lijima, 
Figure 4, Reference No. 20b (user area allocates space for a plurality of data files); 
11:28-12:19. The aforementioned cover the limitations of claim 16. 

23. As per claim 17, the rejection of claim 16 under 35 U.S.C. 103(a) is incorporated 
herein. In addition, at least one available format of the command message is separately 
defined, and wherein each format corresponds to an application program, lijima, figures 
11-17 and related text. The aforementioned cover the limitations of claim 17. 

Conclusion 

Applicant's amendment necessitated the new ground(s) of rejection presented in 
this Office action. Accordingly, THIS ACTION IS MADE FINAL. See MPEP 
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§ 706.07(a). Applicant is reminded of the extension of time policy as set forth in 37 
CFR 1.136(a). 

A shortened statutory period for reply to this final action is set to expire THREE 
MONTHS from the mailing date of this action. In the event a first reply is filed within 
TWO MONTHS of the mailing date of this final action and the advisory action is not 
mailed until after the end of the THREE-MONTH shortened statutory period, then the 
shortened statutory period will expire on the date the advisory action is mailed, and any 
extension fee pursuant to 37 CFR 1,1 36(a) will be calculated from the mailing date of 
the advisory action. In no event, however, will the statutory period for reply expire later 
than SIX MONTHS from the date of this final action. 

Communications Inquiry 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Jung W. Kim whose telephone number is 571-272-3804. 
The examiner can normally be reached on M-F 9:00-5:00. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Gilberto Barron can be reached on 571-272-3799. The fax phone number 
for the organization where this application or proceeding is assigned is 571-273-8300. 
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Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more Information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). 




Jung W Kim 
Examiner 
Art Unit 2132 



August 1 1 , 2005 
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TECHNOLOGY CENTER 2100 




